UFLPA Detentions: What the Importer of Record Has to Prove

Most import rules ask you to declare what something is. This one asks you to prove what it is not.

That single inversion is why the Uyghur Forced Labor Prevention Act catches technology importers who thought it was somebody else’s problem, and why the importer of record is the party expected to assemble and present the evidence when it does.

Carra Globe provides importer of record and exporter of record services, so we have a commercial interest in your answer. What follows is written to be usable whether or not you ever speak to us.

The presumption, and which way it points

Does UFLPA apply to electronics and servers? Yes, it can. It turns on whether goods were mined, produced or manufactured wholly or in part in the Xinjiang Uyghur Autonomous Region, or by an entity on the UFLPA Entity List. The words “in part” are why hardware needs tracing: polysilicon, a cell or an aluminium part several tiers down can be where a listed entity sits, and the final assembler will not tell you.

Under the Act, goods mined, produced or manufactured wholly or in part in the Xinjiang Uyghur Autonomous Region, or by an entity on the UFLPA Entity List, are presumed to be made with forced labour and prohibited from entry.

No finding has to be made against you first. The trigger is where the goods were made, or that a listed entity produced them, and that entity need not be a company you buy from directly. The presumption applies at importation.

Rebutting it means satisfying CBP “by clear and convincing evidence, that the good, ware, article, or merchandise was not mined, produced, or manufactured wholly or in part by forced labor”. That is a high civil standard, applied to a negative proposition about a supply chain you may not own.

What satisfies it is affirmative: documented tracing that shows where the material came from, not a statement that nothing is wrong.

This is the part that catches people. The Act creates a statutory rebuttable presumption, so where it applies the importer supplies the evidence that rebuts it. The shipment stays detained while that evidence is assembled, which is a race between your file and the admissibility timetable.

Why technology hardware is exposed through its inputs

Ask most IT importers whether they handle goods from Xinjiang and the honest answer is no. They buy servers, switches, storage and power equipment from established manufacturers with recognisable names. But checking the brand or the final assembler does not answer the question on its own.

Look at what the August 2026 additions actually name. The notice ties specific entities to specific materials: one in the “research, production, and sales of polysilicon and monocrystalline silicon”, one that “produces lithium carbonate” from regional brine, one that “sources high-purity aluminum and electronic aluminum from suppliers located in the XUAR”, one that “sources titanium from the XUAR through a XUAR-based titanium producer”, and three in gold mining and smelting.

Cotton, textiles and tomatoes sit alongside them.

None of those are finished goods. Electronic aluminium and monocrystalline silicon do not arrive at your dock with a label on them. They arrive inside equipment bought from a manufacturer whose name you recognise.

The phrase that does the work in the statute is “wholly or in part”. A finished product is not automatically outside it because the covered material is one component several tiers upstream, and our note on lithium battery customs clearance covers the other question about the same cell: not whether it travels safely, but where the material inside it came from.

The list is moving outward, not just getting longer

On 3 August 2026 the Department of Homeland Security added forty-three entities to the UFLPA Entity List, taking it to one hundred and eighty-seven. That was the largest single expansion since the list began, and the headline number is the less interesting part.

The statute builds the Entity List from four separate lists of entities, at clauses (i), (ii), (iv) and (v) of section 2(d)(2)(B). Clause (iii) sits between them but requires a list of products rather than entities, which is why the consolidated register is built from four lists, and why the notice itself frames the Entity List around “clauses (i), (ii), (iv), and (v) of section 2(d)(2)(B)”.

Four of the forty-three went on under subsection (ii), covering entities working with the regional government to recruit or transfer labour. Forty-one went on under subsection (v), which covers “facilities and entities, including the Xinjiang Production and Construction Corps, that source material from the Xinjiang Uyghur Autonomous Region”.

Those two counts come to forty-five listings rather than forty-three entities, because two additions appear on both sub-lists. That matters if you screen against one sub-list rather than the consolidated register.

Read that subsection again. It turns on where an entity sources its material, not where it sits. A supplier can be listed because of its sourcing while operating nowhere near the region, which means a map of your supply chain by geography will not tell you whether you are exposed.

For a technology importer that is the practical shift. Checking that your tier-one manufacturer is outside Xinjiang no longer answers the whole question.

What rebutting it actually requires

CBP does not accept an assurance. Its published expectation is that importers apply “due diligence, effective supply chain tracing, and supply chain management measures”, and respond “completely and substantively to CBP requests for information”.

In practice that can mean tracing a specific consignment through multiple tiers towards the raw material and the production sites, with documentation supporting each handover that is relevant to the review, for goods that may have changed hands several times before they reached you. It is a records exercise, and the records belong to other companies.

A file that does the work runs in one direction: from the consignment backwards. Each relevant handover needs a record behind it, and the tracing has to run far enough upstream to reach the materials and production sites that matter to the review, rather than stopping at the last company you recognise.

None of that can begin at the border. A detained shipment is not the moment to discover that your supplier cannot name its own smelter, and the general operational playbook in our guide to resolving a customs hold on IT shipments does not reach this, because this hold is not a documentation error you can correct and resubmit

What belongs in the file

That is the direction. This is the inventory. CBP publishes no fixed list of documents, so treat it as evidence that strengthens a file, and check it against what you hold rather than what you assume a supplier could produce.

• The bill of materials. Model by model, to component level, because the finished unit on its own will not tell you which parts need checking. Most resellers do not hold one, which makes it the first thing to ask the manufacturer for.
• Manufacturing and assembly sites. Identified at site level rather than by country.
• Sub-supplier records. Your supplier’s own purchase documentation for the high-risk inputs, rather than its assurance about them.
• Material sourcing evidence. Where the polysilicon, cells, aluminium, titanium or gold came from, and from which production site where the supplier can evidence it.
• Transport and chain of custody. Records connecting the stages, so the file reads as one chain rather than a set of unrelated documents.
• Screening results. Dated checks against the current Entity List for every party in the chain you can name.
• Translations. English versions of records held in another language, which CBP can ask for.

One thing in that list is not a document. Decide, before a consignment moves, who on your side coordinates a response if a shipment is detained. And a supplier declaration can support the file. It should not be the file.